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PERFORMANCE INFORMATION MONITORING 
SYSTEM, METHOD AND PROGRAM 

BACKGROUND OF THE INVENTION 

The present invention relates to monitoring 
and collection of performance information concerning a 
computer system having resources such as storage 
5 devices by using a computer. 

One of related arts is to issue an instruc- 
tion to increase a collection frequency of data to be 
managed from the next time when an abnormal variation 
is found in the data to be managed (for example, refer 
10 to JP-A-2001-273336, pp. 3-5). 

One of methods for collecting data from a 
controller is to collect data from one of controllers 
having a high rate of change of important monitoring 
data at a preferential rate (for example, refer to JP- 
15 A-7-282090, pp. 2-4) . 

In the related arts, no consideration was 
paid to the influences on other parts caused by a 
change in data when performance information is provided 
to a user. 



2 0 SUMMARY OF THE INVENTION 

It is an object of the present invention to 
issue an instruction about a data collection interval 
according to the detected result of occurrence of an 



- 2 - 

input or output to/from disk area. 

Another object of the performance information 
is to acquire information according to user's 
designation . 

5 A further object of the performance informa- 

tion is to provide performance information easily 
understandable for a user. 

In accordance with the performance informa- 
tion, the above objects are attained by providing a 

10 method for collecting performance information using 

computers, wherein a first computer accepts information 
about a group to which the computer belongs and stores 
the accepted group information in a storage, and when 
the first computer receives performance information 

15 from a second computer, compares the received 

performance information with performance information 
previously stored in the storage, and found a change in 
the performance information on the basis of the 
performance information comparison, the first computer 

20 judges whether or not the second computer is included 
in the group information and issues an instruction to 
the computer included in the group information to 
change an interval of collecting the performance 
information . 

25 Other objects and methods for solving the 

objects as disclosed in the present application will be 
apparent as the following description of the invention 
advances as detailed with reference to preferred 
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embodiments of the invention as shown in accompanying 
drawings . 

BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is an example of an agent program; 
5 Fig. 2 is an example of a manager program; 

Fig. 3 is an example of a host to be 
monitored and a program for operating the host; 

Fig. 4 is an example of a client program; 
Fig. 5 is an example of data stored in a data 
10 storage 130; 

Fig. 6 is an example of data stored in a data 
storage 230; 

Fig. 7 is an example of operations of a 
volume management module 33 0; 
15 Fig. 8 is an example of operations of a 

driver 350; 

Fig. 9 is an example of operations of a data 
collection interval manager 123; 

Fig. 10 is another example of operations of 
20 the data collection interval manager 123; 

Fig. 11 is an example of operations of the 
manager program; 

Fig. 12 is another example of operations of 
the manager program; 
25 Fig. 13 is an exemplary configuration of an 

entire system; 

Fig. 14A is an example of display screen 
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representation; 

Fig. 14B is an example of information of 
user-designated group; 

Fig. 15 is an example of information about a 
5 system configuration, volume and threshold associated 
with each other; and 

Fig. 16 is an example of operations of the 
manager program. 



DESCRIPTION OF THE EMBODIMENTS 
10 The embodiments according to the present 

invention will be described in detail. 

Fig. 1 shows an example of an agent program. 
An agent program 100 includes a communication 
controller 110, a data collection/management module 
15 120, and a data storage 130. 

The communication controller 110 has a 
function of transmitting and receiving data when data 
transmission, wireless communication or the like is 
carried out in a network such as a local area network 
2 0 (LAN) . 

The data collection/management module 120 
includes a data collector 121, a data collecting object 
manager 122, and a data collection interval manager 
123. 

25 The data collecting object manager 122 

manages information of an object from which data is to 
be collected. Data to be collected include information 
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about disks or various types of storages (such as RAID 
(redundant arrays of inexpensive disks), DVD (digital 
versatile disk) , MO (magneto optical disk) , tape, 
switch) , information about a computer for managing such 
5 storages, and information about software or computer 
which utilizes such storages. 

The data collection interval manager 123 has 
a function of receiving a data collection interval 
shortening event and shortening a data collection 
10 interval, and also has a function of receiving a data 
collection interval enlarging event and enlarging a 
data collection interval. 

The word "event" as used herein means 
information to be transmitted and received by a program 
15 (or computer) . Details of information included in the 
event will be explained when an event generator 
included in each program is explained. . 

The data collector 121 has a function of 
collecting data on the basis of information held in the 
20 data collecting object manager 122 and data collection 
interval manager 123. 

The data collector 121 has a function of 
storing collected data in the data storage 130 in an 
order of time series. How capacity type data acquired 
25 by the data collector 121 are stored in the data 

storage 130 will be explained in detail in connection 
with an exemplary case by referring to Fig. 5. 

The data storage 130 has a function of 
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transmitting data stored in the data storage 130. 

Fig. 2 is an example of a structure of a 
manager program. 

A manager program 200 includes a communica- 
5 tion controller 210, a data collection/management 
module 220, a data collector 221, a data collecting 
object manager 222, a data collection interval manager 
223, an acquired data time information manager 224, a 
data storage 230, a data change information management 
10 module 240, a data change detector 241, and an event 
generator 242. 

The communication controller 210 has a 
function of transmitting data to the agent program 100 
according to a request from the data collector 221 and 
15 receiving data from the agent program 100 when data 
transmission, wireless communication or the like is 
carried out via a network such as a local area network 
(LAN) . The communication controller 210 also has a 
function of transmitting data to the agent program 100 
20 according to a request from the event generator 242. 

The data collection/management module 220 
includes the data collector 221, the data collecting 
object manager 222 and the data collection interval 
manager 223. 

25 The data collecting object manager 222 has 

information on the agent program of an object from 
which data is to be collected. When a plurality of 
agent programs are present for the manager program 200 
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on a network via a LAN, it is assumed that the data 
collecting object manager 222 selects one of the agent 
programs of the object for data to be collected 
therefrom. 

5 In this connection, the agent program 

information may be any of the following information or 
the other information. 

• Identifier or title of the agent program. 

• Host name, MAC address or IP address of a computer to 
10 be operated by the agent program. 

• Information (title, volume name, port number, WWN 
(world wide name), performance information, etc.) on 
a storage of a computer operated by the agent 
program. 

15 • Information (DBMS (data base management system) , OS, 
Web server program, application program or the like) 
on a program using a file stored in a storage of a 
computer operated by the agent program. 

• Port number used for a computer operated by the agent 
20 program. 

• IP address of the manager program of the agent 
program for data transmission and reception. 

The data collection interval manager 223 has 
information about time interval at which the manager 
25 collects data from the agent program to be monitored. 
On the basis of the data collection time-interval 
information possessed by the data collection interval 
manager 223, the manager program 200 issues a request 
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to transmit data possessed by the agent program from 
the agent program 100 to the manager program at regular 
intervals . 

The acquired data time information manager 
5 224 , which has time information of data stored in the 
data storage 230, has a function of updating the 
acquired time information according to data transmitted 
from the data storage 130. 

The data collector 221 has a function of 
10 collecting data on the basis of information possessed 
by the data collecting object manager 222 and data 
collection interval manager 223, and also has a 
function of demanding data not stored yet in the data 
storage 230 of the data storage 130 on the basis of the 
15 information of the acquired data time information 
manager 224 . 

The data change information management module 
240 has the data change detector 241 and the event 
generator 242 . 

20 The data change detector 241 has a function 

of comparing data acquired from the data storage 130 
with data acquired from the data storage 130. 

The data change detector 241 has a function 
of judging the presence or absence of a change in the 

25 capacity information, used capacity information, the 

value of free capacity information, etc. (which will be 
referred to as capacity type data or information, 
hereinafter) of the data acquired from the data storage 
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130. 

In this connection, when the data change 
detector 241 judges the presence or absence of a change 
in the acquired information, the detector may deter- 
5 mines the presence of a change in the information when 
finding a difference between N-th acquired information 
and (N+l)-th acquired information, or may judge the 
presence or absence of an information change by using 
another method. 

10 The data collector 221 has a function of 

storing data corresponding to a change in the data 
storage 230 when the data change detector 241 detects 
the change in the capacity type data. 

The data collector 221 functions to update 

15 the time information of data stored in the data storage 
230 when the data change detector 241 detects the 
absence of a change in the capacity type data. The 
data collector 221 also functions to discard the data 
without being stored in the data storage 230 when the 

20 data change detector 241 detects the absence of a 
change in the capacity type data. 

The event generator 242 has a function of 
generating a data collection interval enlarging event 
for the data collection interval manager 123 of the 

25 agent program 100 when the data change detector 241 
detects the absence of a change in the capacity type 
data . 

The event generator 242 of the manager 
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program generates an event according to information 
received from the agent program. The event includes 
information which follow. These information, however, 
are given as an example and thus other information for 
use in the monitoring or collection of performance 
information may be used as an event. 

• Data collection interval change flag. 

• IP address of a computer operated by the program as a 
destination. 

• Port number for the program to use in transmission 
and reception of data. 

For example, an event when a flag for 
shortening a data collection interval is "0", a flag 
for enlarging the data collection interval is "1", an 
IP address is "111.222.33.4", and a port number is 
"8080", includes exemplary information which follows. 
(In this connection, the contents of the data collec- 
tion interval change flags may be previously defined in 
the agent program and manager program.) 

I 0 | 111.222.33.4 | 8080 | ... Example of Data 
Collection Interval Enlarging Event 

How the manager program 200 acquires and 
processes data held in the agent program 100 will be 
explained in detail by referring to a flowchart of Fig. 
9. 

The data storage 230 has a function of 
transmitting the data of the data storage 230. How the 
data of the agent program acquired by the data 
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collector 221 is stored in the data storage 230 will be 
explained in detail in connection with its example with 
use of Fig . 6 . 

Shown in Fig. 3 is an example of a structure 
5 of a host to be monitored. 

A host 300 to be monitored includes a user 
program 310 , a file system 320 , a volume management 
module 330, an input/output generation detector 331, an 
event generator 332, an operation system 340, a driver 
10 350 , a number of input /output operations threshold 

manager 351, a number of input/output operations over- 
threshold detector 352, an event generator 353, and a 
disk unit 360. 

The user program 310 has a function of 
15 operating a program defined by a user. 

The file system 320 has information for 
managing a disk connected to the host to be monitored 
(a computer such as a server) or a storage to be used 
by a server via a network. 
20 The file system is used for a disk or the 

like connected to the server. Thus the operation 
system can manage the capacity information, used 
capacity information, free capacity information, the 
number of recorded files, file owner, file write 
25 authority, file read authority, and file execution 
authority of the disk included in the file system. 

The disk capacity monitoring device can 
monitor the capacity type information of the disk 
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connected to the server using a function offered by the 

operation system. 

The volume management module 330 has an 

input/output generation detector 331 and an event 
5 generator 332 . The word "volume" as used herein refers 

to one of disks connected to a server and having 

divided sections of suitable sizes. The volume may 

also refer to a storage area of various types of 

storages not connected directly to a server. For 
10 example, the volume may refer to an area of a storage 

usable by a computer via a storage area network (SAN) 

or may refer to another type of area. 

The input/output generation detector 331 has 

a function of monitoring a disk area having the 
15 capacity type information possessed by the file system 

stored therein and detecting an occurrence of input or 

output . 

When the input/output generation detector 331 
detects an occurrence of an input or output to or from 

20 the disk area having the capacity type information of 

the file system stored therein, the event generator 332 
has a function of generating a data collection interval 
shortening event to the data collection interval 
manager 123 of the agent program 100. 

25 The operation system 340 functions to provide 

a common function utilized by the user program 310 to 
manage the entire server. 

The driver 350 has a number of input/output 
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operations threshold manager 351, a number of 
input/output operations over-threshold detector 352, 
and an event generator 353. 

The driver has a function of causing the 
5 operation system to operate peripheral devices. 

The number of input/output frequency 
threshold manager 351 has a function of managing 
threshold values of an input/output frequency and time 
information of an internal clock within the server as 
10 parameters. 

The number of input/output operations over- 
threshold detector 352 has a function of detecting the 
fact that the input/output operations to/from the disk 
to be managed by the driver exceeded the threshold 
15 value. 

When the number of input/output operations 
over-threshold detector 352 detected the fact that the 
input/output operations to/from the disk to be managed 
by the driver exceeded the threshold value, the event 
20 generator 353 has a function of generating a data 
collection interval shortening event to the data 
collection interval manager 123 of the agent program 
100. 

The disk unit 360 indicates disks to be 
25 monitored by the driver 350. 

The disk unit 360 is controlled under control 
of the operation system 340 using the function of the 
driver 350. 
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Fig. 4 shows an example of a structure of a 
client program. 

A client program 400 has a communication 
controller 410, a data collector 420 and a data display 
5 430. 

The communication controller 410, which is 
connected to a local area network (LAN) , has a function 
of transmitting or receiving data. 

The data collector 420 has a function of 
10 issuing a request to the data storage 230 of the 
manager program 200 to transmit data to the client 
program 400 . 

The data display 430 has a function of 
displaying data transmitted from the data storage 230 
15 of the manager program 200. 

Fig. 5 shows an example of data stored in the 
data storage 130 of the agent program 100. The data 
are stored in a resource column 510 , a capacity column 
520, a used capacity column 530, a free capacity column 
20 540 and a time column 550. 

Stored in the resource column 510 are file 
system names acquired by the agent program 100 using 
the function of the operation system 340. In this 
connection, the type name, volume name or identifier of 
25 a storage device may be used as the resource name. 

Stored in the capacity column 520 are the 
capacity information of the file systems acquired by 
the agent program 100 using the function of the 
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operation system 340. 

Stored in the used capacity column 530 are 
used capacity information of the file systems acquired 
by the agent program 100 using the function of the 
5 operation system 340. 

Stored in the free capacity column 540 are 
free capacity information of the file systems acquired 
by the agent program 100 using the function of the 
operation system 340. 

10 Stored in the time column 550 are time 

information of the internal clock possessed by the 
server, based on which the agent program operates when 
the agent program 100 acquires the data in the resource 
column 510, capacity column 520, used capacity column 

15 530 and free capacity column 540 using the function of 
the operation system 340. 

Data collected by the data collector 121 of 
the agent program 100 are sequentially stored in the 
data storage 130 together with time information for 

20 each of the data. Accordingly, even when no change 

takes place in the acquired capacity type information, 
the acquired data are stored in the data storage 130 
together with time information. In the example of Fig. 
5, there is no change in the capacity type information 

25 of from "2003/01/13 05:00 to "2003/01/13 07:00", but 
the data are sequentially stored in the data storage 
130. 

Fig. 6 shows an example of data of the data 
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storage 130 stored in the data. storage 230 when the 
data storage 130 is in such a state as shown in Fig. 5. 

Data are stored in a resource column 610, a 
capacity column 620, a used capacity column 630, a free 
5 capacity column 640, a start time column 650 and an end 
time column 660, which columns will be explained below. 

Stored in the resource column 610 are 
information of the resource column 510 acquired by the 
manager program 200 from the data storage 130 of the 
10 agent program 100. 

In this case, however, it is featured that, 
when the acquired resource name of the resource column 
510 is the same as the resource name acquired at the 
previous time and when the data change detector 241 of 
15 the manager program 200 detects the fact that there is 
no change in any of the data of the capacity column 
520, used capacity column 530 and free capacity column 
540 acquired by the manager program 200 from the data 
storage 130 of the agent program 100; the data of the 
20 resource column 510 is not stored in the resource 
column 610. 

Stored in the capacity column 620 are 
information of the capacity column 520 acquired by the 
manager program 200 from the data storage 130 of the 
25 agent program 100. 

In this case, however, it is featured that, 
when the resource name of the resource column 510 is 
the same as the resource name acquired at the previous 
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time and when the data change detector 241 of the 
manager program 200 detects the fact that there is no 
change in any of the data in the capacity column 520 , 
used capacity column 530 and free capacity column 540 
5 acquired by the manager program 200 from the data 

storage 130 of the agent program 100; the data of the 
capacity column 520 is not stored in the capacity 
column 62 0. 

Stored in the used capacity column 630 are 

10 information of the used capacity column 530 acquired by 
the manager program 200 from the data storage 130 of 
the agent program 100. 

In this case, however, when the resource name 
of the resource column 510 is the same as the resource 

15 name acquired at the previous time and when the data 

change detector 241 of the manager program 200 detects 
the fact that there is no change in any of the data in 
the capacity column 520, used capacity column 530 and 
free capacity column 540 acquired by the manager 

20 program 200 from the data storage 130 of the agent 

program 100; the data of the used capacity column 530 
is not stored in the used capacity column 630. 

Stored in the free capacity column 640 are 
information of the free capacity column 540- acquired by 

25 the manager program 200 from the data storage 130 of 
the agent program 100. 

In this case, however, it is featured that, 
when the resource name of the resource column 510 is 
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the same as the resource name acquired at the previous 
time and when the data change detector 241 of the 
manager program 200 detects the fact that there is no 
change in any of the data in the capacity column 520, 
5 used capacity column 530 and free capacity column 540 
acquired by the manager program 200 from the data 
storage 130 of the agent program 100; the data of the 
free capacity column 540 is not stored in the free 
capacity column 640. 

10 Stored in the start time column 650 are 

information of the time column 550 acquired by the 
manager program 200 from the data storage 130 of the 
agent program 100. 

In this case, however, it is featured that, 

15 when the resource name of the resource column 510 is 

the same as the resource name acquired at the previous 
time and when the data change detector 241 of the 
manager program 200 detects the fact that there is no 
change in any of the data in the capacity column 520, 

20 used capacity column 530 and free capacity column 540 
acquired by the manager program 200 from the data 
storage 130 of the agent program 100; the data of the 
time column 550 is not stored in the start time column 
650. 

25 Stored in the end time column 660 are time 

information at which data collection ends. In this 
case, one of the end times is "9999/12/31 23:00" as an 
example . 
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In this case, however, it is featured that, 
when the resource name of the resource column 510 is 
the same as the resource name acquired at the previous 
time and when the data change detector 241 of the 
5 manager program 200 detects the fact that there is no 
change in any of the data in the capacity column 520, 
used capacity column 530 and free capacity column 540 
acquired by the manager program 200 from the data 
storage 130 of the agent program 100; the data of the 
10 time column 550 is not stored in the end time column 
660 . 

Explanation will next be made in detail in 
connection with an example wherein data are stored into 
the data storage 230 of the manager program from the 

15 data storage 130 of the agent program under control of 
the manager program 200. 

Since the data of from "2003/01/13 05:00" to 
"2003/01/13 07:00" stored in the data storage 130 cause 
no change in the capacity type information, it is 

20 represented by one line in the data storage 230. When 
the next line is not present in the data storage 230, a 
value indicative of an end time is stored in the end 
time column of the data storage 230. The data of the 
end time column is updated to designated time data when 

25 the next line is added . 

Since the data of "2003/01/13 08:00" causes a 
change in the used capacity and free capacity informa- 
tion, a line is added in the data storage 230 to store 



the data. At this time, the end time column of the 

previous-line data is updated to "2003/01/13 07:00". 

Since the data of "2003/01/13 10:00" causes a 

change in the capacity and free capacity information, a 
5 line is added in the data storage 230 to store the 

data- At this time, the end time column of the 

previous-line data is updated to "2003/01/13 09:00". 

Since the next line is not present, the end time column 

is "9999/12/31 23:00". 
10 Fig. 7 shows a flowchart for explaining a 

flow of operations of the volume management module 330. 

It is assumed in this case that the system 

can monitor an input or output to or from a disk area 

having capacity type information of the file system 
15 stored therein under control of the volume management 

module . 

The volume management module detects an 
occurrence of an input or output to or from the disk 
area having the capacity type information of the file 
20 system stored therein (step 710) , generates a data 

collection interval shortening event (step 720), and 
informs the data collection interval manager 123 of the 
agent program 100 of the generated event (step 730) . 

A flowchart of Fig. 8 explains a flow of 
25 operations of the driver 350. 

It is assumed in this example that, even when 
an input or output to or from the disk area having the 
capacity type information of the file system stored 
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therein cannot be monitored by the volume management 
module, the system of the performance information can 
monitor an input/output frequency to or from the disk 
to be managed by the driver. 
5 It is also assumed that a means for 

monitoring the input/output frequency to/from the disk 
to be managed by the driver is an alternative to the 
means for monitoring an input or output to or from the 
disk area having the capacity type information of the 

10 file system stored therein under control of the volume 
management module . 

The driver detects the fact that an 
input/output frequency to/from a disk to be managed by 
the driver (step 810), generates a data collection 

15 interval shortening event (step 820) , and informs the 
data collection interval manager 123 of the agent 
program 100 of it (step 830). 

Figs. 9 and 10 show flows of operations of 
the data collection interval manager 123 of the agent 

20 program 100. 

It is assumed that the data collection 
interval manager 123 of the agent program 100 has 
information about a minimum and maximum of the data 
collection interval of the agent program 100. 

25 The data collection interval manager receives 

a data collection interval shortening event from the 
event generator 332 of the volume management module 330 
or from the event generator 353 of the driver 350 (step 



910) , and decreases the data collection interval value 
by a predetermined amount when a current data collec- 
tion interval is larger than the minimum value (step 
920) (step 930) . 
5 In this connection, a predetermined value for 

narrowing the data collection interval as well as a 
predetermined value for widening the data collection 
interval may be previously determined by a system 
administrator and be stored in the storage. The same 

10 holds true even for the minimum and maximum of the data 
collection interval. 

The data collection interval manager receives 
a data collection interval shortening event from the 
event generator 332 of the volume management module 330 

15 or "from the event generator 353 of the driver 350 (step 
910) , and not changes the data collection interval but 
holds the current set value when the current data 
collection interval is not larger than the minimum 
value (step 920) (step 940) . 

20 The data collection interval manager fails to 

receive a data collection interval shortening event 
from the event generator 332 of the volume management 
module 330 or from the event generator 353 of the 
driver 350 (step 910) , receives a data collection 

25 interval enlarging event (step 1010), and sets the data 
collection interval value to be larger by a predeter- 
mined value (step 1030) when the current data 
collection interval value is smaller than the maximum 



value (step 1020) . 

The data collection interval manager fails to 
receive a data collection interval shortening event 
from the event generator 332 of the volume management 
5 module 330 or from the event generator 353 of the 
driver 350 (step 910), receives a data collection 
interval enlarging event (step 1010) , and not changes 
the data collection interval value but holds the 
current value (step 1040) when the current data 

10 collection interval value is not smaller than the 
maximum value (step 1020) . 

When failing to receive a data collection 
interval shortening event from the event generator 332 
of the volume management module 330 or from the event 

15 generator 353 of the driver 350 (step 910) and also 

failing to receive a data collection interval enlarging 
event (step 1010); the data collection interval manager 
not changes the data collection interval value b,ut 
holds the current value (step 1040) . 

20 Figs. 11 and 12 show flows of operations of 

the manager program 200. 

The manager program determines a range of 
time data to be acquired by the acquired data time 
information manager 224 (step 1110), acquires not- 

25 acquired data from the data storage 130 (step 1120) , 

updates acquired data time information at the acquired 
data time information manager 224 (step 1130), and 
stores the acquired data in the data storage 230 when 
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the data corresponds to the first-time data for an 
agent to be monitored (step 1140) (step 1160). 

The acquired data time information manager 
224 determines a range of time data to be acquired 
5 (step 1110) . 

The manager program acquires not-acquired 
data from the data storage 130 (step 1120) , and updates 
the acquired data time information at the acquired data 
time information manager 224 (step 1130). When the 

10 acquired data is not the first-time data for the agent 
to be monitored (step 1140) and when the data change 
detector 241 judges the presence or absence of a change 
in the acquired data (step 1150) and determines the 
presence of a change in the capacity type data of the 

15 acquired data (step 1210), the manager program stores 
the acquired data in the data storage 230 and updates 
the data storage 230 (step 1220). 

The manager program determines a range of 
time data to be acquired at the acquired data time 

20 information manager 224 (step 1110) , acquires not- 
acquired data from the data storage 130 (step 1120) , 
and updates the acquired data time information at the 
acquired data time information manager 224 (step 1130) . 
When the acquired data is not the first-time data for 

25 the agent to be monitored (step 1140) and when the data 
change detector 241 judges the presence or absence of a 
change in the acquired data (step 1150) and determines 
the absence of a change in the capacity type data of 



the acquired data (step 1210) ; the event generator 242 
generates a data collection interval enlarging event 
(step 1230) , informs the data collection interval 
manager 123 of the generated event via the communica- 
5 tion controller 210 (step 1240) , and not stores the 
data acquired from the data storage 130 in the data 
storage 230 but discards it (step 1250) . 

In this way, by immediately detecting a 
change in the capacity information of the server and 

10 shortening the data collection interval of the agent 

program, the system can accurately collect data at the 
time of occurrence of a change in the capacity 
information. 

Further, by providing upper and lower limits 

15 for the data collection interval and determining a 

prescribed value for the data collection interval, the 
system can control a load caused by data collection and 
can arrange granularity of data to be collected to be 
uniform. Since the granularity of data is arranged to 

20 be uniform, the system, can display a plurality of 

pieces of collected data in such a manner that the user 
can easily see them. In addition, since the data 
collection interval has its upper limit, information 
collection can be done at intervals of a constant time. 

25 Thus the system administrator also can confirm whether 
or not a computer as a destination of the data 
collection is operated. 

Another embodiment will be explained by 
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referring to Figs - 13 to 16 . 

Fig. 13 shows an example of an entire system. 
A computer 1300 and a computer 1301 are 
connected to the Internet 1303. The aforementioned 
5 computer or portable terminal 1302 performs data 

transmitting and receiving operations to and from a Web 
server. 

In a computer 1304, an agent program 1305 and 
a Web server A 1306 as a server program are operated. 
10 In a computer 1307, an agent program 1308 and 

a Web server B 1309 as a server program are operated. 

In a computer 1310, an agent program 1311 and 
an AP server 1312 as an application server program are 
operated . 

15 In a computer 1313, an agent program 1314 and 

a DBMS_A 1315 as a DBMS are operated. 

In a computer 1316, an agent program 1317 and 
• a DBMS_B 1318 are operated. 

In a computer 1319, a manager program 1320 is 

20 operated. 

Each of the computers issues an instruction 
as necessary to perform data writing and reading 
operations over storage units 1322 and 1323 such as 
display arrays connected to a storage area network 
25 (SAN) or over a tape unit 1325 connected to a computer 
1324 . 

When a user utilizes a Web service using the 
computer 1300, a request data from the user is 
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transmitted from the server A 1306 receiving the user's 
request to the AP server 1312, and further from the AP 
server to the DBMIS A 1315. The DBMIS A 1315 in turn 
issues an access request to the storage unit 1322 or 
5 the like via the SAN. 

In this connection, though not illustrated, 
an apparatus such as each computer has an OS function - 
of performing necessary operations. Further, a com- 
puter for the manager program to monitor may have such 

10 a program function as a driver or volume management 
module as necessary. 

Fig. 14A is an example of display screen 
representation. 

A configuration of an entire system is 

15 displayed in the form of a tree structure in a window 
of a management objective entire tree representation 
1400. The manager program collects necessary 
information (such as IP address, net mask, host name, 
etc. for each computer) by polling the agent program at 

20 regular intervals, and displays' information about the 
system configuration on the basis of the collected 
information. 

In this example, an entire network 1401 is 
represented as a root, and subnets 1402 and 1407 and 

25 computers 1403 and 1408 are represented as directories 
thereof. When the computer 1403 has a host name of 
"Host_A" and an IP address of "111.222.41.32", further, 
the computer may also be represented by "Host_A 



111.222.41.32" as illustrated. When a net mask is 
"255.255.255.0" and a server IP address is 
"111.222.41.32", a subnet may be represented by 
"111.222.41.0". 
5 Reference numerals 1403, 1404, 1405 and 1406 

denotes a computer and volume names (or drive names) 
managed by the computer which are shown in the form of 
a tree structure as associated with each other. The 
same similarly holds true even for reference numerals 

10 1408, 1409, 1410 and 1411. 

Volume names designated by the user are 
represented in a tree form in the window of a user- 
designated tree representation 1412. The representa- 
tion is displayed based on information about a user- 

15 designated group, which will be explained with 
reference to Fig. 14B. 

In the window of a system alarm tree 
representation 1430, when the value of a disk 
performance such as a used capacity or free capacity . 

20 for the disk exceeds a threshold value, the volume name 
of the associated disk and the name of the computer for 
managing the volume are displayed as associated with 
each other. 

To a root 1418, date information when the 

25 performance information of the disk volume exceeds the 
threshold value, an item name of the performance 
information exceeding the threshold value, etc. may be 
given as its name. Further, the name or identifier of 
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the disk volume having the value exceeding the 
threshold value and a computer for managing the disk 
volume are represented as associated with each other. 
Detailed contents when the disk volume exceeded the 
5 threshold value are exemplified by reference numerals 
1419, 1420 and 1421. In this case, the case when disk 
used capacity exceeded the threshold value is 
illustrated as an example. The contents of threshold 
value and alarm message will be explained with 

10 reference to Fig. 15. 

In the window of the system alarm tree 
representation 1430, not only a volume exceeding a 
threshold value but also a volume name, host name, etc. 
associated with the exceeded-threshold volume are 

15 represented, examples of which are denoted by reference 
numerals 1422 and 1423. 

For example, such a case that a DBMS is using 
a volume having a volume name " / DBMS_A" managed by a 
computer having a host name "Host_D" and the volume 

20 name exceeds its threshold value (when. the volume use 
state information satisfies predetermined conditions) , 
is assumed. 

In this case, assume that an event for 
shortening a data collect ion interval is transmitted to 

25 the manager program at the same time as the volume 

having the volume name "/DBMS_A" exceeds the threshold 
value of use amount and an event for shortening a data 
collection interval for a volume having a volume name 
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M /A/WebServerProg_A" is transmitted from the agent 
program operated by the computer having the host name 
"Host_A" to the manager program. Then the system 
judges that the both are associated with each other and 
5 displays the both in the window of the system alarm 
tree representation. 

In the window of the system alarm tree 
representation, the tree representation may be carried 
out only for a constant time from the time point when 

10 the volume exceeded the threshold value, after which 

the tree representation may be erased while leaving an 
alarm message, or the display representation may be 
erased and data information may be saved in a log file. 

In the example of Fig. 14A, the volume 1402 

15 having the value exceeding the threshold as well as 
items 1419, 1422, 1423, 1403, 1406, 14 08, 1411, 1414 
and 1415 associated with the volume are displayed as 
highlighted in the respective windows. 

In this way, since not only the volume 

20 exceeding the threshold value but items associated 
therewith are also displayed as highlighted, volume 
management can be realized, taking the entire system 
configuration into consideration. Further, items 
designated by the user are displayed, the items can 

25 also be monitored for each of volumes designated by the 
user (system administrator) . Even with regard to an 
item not designated by the user as a monitoring object, 
if it is necessary to issue an alarm to the 
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administrator for the item, then it can be displayed to 
be easy to understand it on the system alarm tree 
representation screen . 

Fig. 14B is an example of information of a 
5 user-designated group. 

The user-designated group information include 
a user-designated group name 1450, host name or agent 
name 1451, volume name 1452 and performance information 
display designation 1453 associated with each other. 

10 For these information, an item designation 

menu may be provided in the window of Fig. 14A and 
information accepted by user input may be stored in the 
menu, or information entered on a command line may be 
stored therein. 

15 When a single agent program is operated in 

each computer, information belonging to a group may be 
managed by a host name. Further, when a plurality of 
agent programs are operated, in a single computer or 
when managed volumes are different for different agents 

20 operated by the same computer, the information 

management may be carried out by the identifiers or 
names given to the agent programs. 

In this connection, information may be 
designated or designated by the user who enters or 

25 inputs an object name (resource name) such as an agent 
name to be grouped and the name of the group to on a 
command line. For example, such an input can be 
employed. 
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Command for Execution of Group [resource 
name] [group name] 

Further, the group designation may be carried 
out by the user who designates the agent, server or 
5 volume represented in a tree form with use of a mouse 
pointer or the like on the basis of information (such 
as an agent name or host name transferred between the 
agent program and manager program) managed by the 
manager program. 

10 The group information stored in the storage 

is used in such a manner that, when an event or 
performance information was transmitted from another 
computer (or agent program) to the manager program, the 
manager program judges whether or not a computer (or 

15 agent program) which transmitted the event or perfor- 
mance information belongs to the group information, and 
on the basis of its judgment result, it transmits 
necessary information to a computer belonging to the 
same group. 

20 For example, when the system administrator 

wants to monitor performance information relating to a 
plurality of Web server programs, the administrator 
designates the plurality of Web server programs as a 
group. When a number of input/output operations 

25 to/from a storage used by one of the Web server 

programs belonging to the group is increased, the 
administrator can issue such an instruction as to 
change the collection interval of performance 



information for the volume used by the Web server 
program belonging to this group. When the volume 
exceeds its threshold value, the performance informa- 
tion of the volume belonging to the group can be 
5 displayed as associated therewith on the screen. 

The designation of the displayed performance 
information is an example of designation of performance 
information items to be provided for the user. In the 
illustrated example, a free capacity 1454, used 

10 capacity 1455, device detail 1456, and I/O 1457 with 
respect to the disk volume are enumerated as an 
example, but other items may be used. 

In this example, since item representation or 
non-representation is designated for each volume, 

15 information can be displayed in detail for each volume. 
A method for displaying these items may be, when the 
volume exceeds the threshold value, to display it using 
a popup window, or another method may be employed. 

Fig. 15 is an example of information relating 

20 to system configuration, volume name and threshold 
value associated with each other. 

The system configuration information includes 
a subnet 1500 and a host name 1501. In this 
connection, the host name may be replaced by the name 

25 of the agent program or the identifier of the agent 

program. These information are exemplary information 
to be managed by the manager program on the basis of 
information received from the agent program, but 
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information except for these information may be 
managed. Further, the manager program collects and 
manages information from the agent program at regular 
intervals. Thus, even when the system configuration is 
5 changed, information managed by the manager program may 
be designed to be updated. 

In this example, a threshold value 1503 is 
set for each volume as an example. As the threshold 
value, the system administrator may previously set a 
10 predetermined value for a free capacity 150 4 or used 
capacity 1505 of each volume according to the volume. 
Further, an alarm message 1506 is set for each volume 
by the system administrator . 

Fig. 16 is an example of operations of the 
15 manager program. 

The manager program receives an event from 
the agent (step 1610) . 

The manager program judges whether or not the 
identifier ( such as a host name ) of a computer included 
2 0 in the received event and operated by the agent is 

included in the group information (see Fig. 14B) (step 
1620) . 

When determining that the computer identifier 
is included in the group information, the manager 
25 program transmits the event to a host operated by an 

agent belonging to the same group as the identifier of 
the computer operated by the agent included in the 
received event (step 1630) . 
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The manager program judges whether or not the 
agent which transmitted the event in the step 1610 
manages a volume exceeding a threshold value (step 
1640) . The judgment may be carried out by acquiring 
5 information about storage from the host to which the 

agent transmitted it, or another judgment method may be 
employed. 

When determining in the step 1640 that the 
agent manages the volume exceeding the threshold value, 

10 the manager program judges a data collection interval 
change flag included in the event (step 1650) . If the 
judgment result is "0", then the manager program 
searches for and displays associated items on the basis 
of the event acquired from the agent program or 

15 information obtained by polling the agent program at 
regular intervals (step 1660). In this connection, 
this operation is an example when the flag for 
shortening a data collection interval included in the 
event is "0", and thus other operation may be employed. 

20 The manager program judges whether or not 

window-associated items are displayed and, according to 
the judgment result, the manager program displays 
information of tree-represented items in a highlighted 
manner or displays an alarm message (step 1670). At 

25 this time, if information of use state of the volume 
corresponding to the volume name represented in the 
window satisfies predetermined conditions, then the 
manager program display the volume name in a 
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highlighted manner. Further, not only the volume name 
but items associated therewith are also displayed as 
highlighted. 

When the volume satisfying the predetermined 
5 conditions and volumes associated therewith are judged 
and representation of the associated volumes is changed 
in the step 1670, its judgment may be made by the 
manager program using a previously-stored event or the 
received event. 

10 For example, if events past accumulated have 

data having a predetermined tendency with time, the 
manager program can display these events and the volume 
under management of a computer operated by the agent 
program which transmitted these events as associated 

15 therewith. As an example, when performance information 
transmitted from the agent program which manages a 
volume name "/DBMS_A" to the manager program as well as 
performance information transmitted from the agent pro- 
gram which manages a volume name " /A/WebServerProg_A" 

20 to the manager program changes in the used capacity at 
an identical time point (for example, 2003/01/14 
10:00), volumes corresponding to the two volume names 
("/DBMS_A" and " /A/WebServer Prog_A" ) can be judged as 
associated items. 

25 Further, when the manager program acquires 

past data stored on a time series basis from the 
respective agent programs and when some of the time- 
series past data have the same data change tendency 
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(e.g., when the capacity of a volume changes one hour 
later from a time at which the capacity of another 
volume changes at intervals of one day) , the manager, 
program can judge these data as associated items. Of 
5 course, it goes without saying that another method can 
be employed to judge and display a volume exceeding a 
threshold value and a device associated with the 
volume . 

With regard to the display of these 
10 information, information offered by the manager program 
may also be displayed using a browser or the like 
operated by a portable terminal or computer or by other 
means . 

In this way, when data about a volume to be 
15 monitored is changed, the performance information 

collecting, function can be used to judge the data and 
items associated therewith. As a result, there is 
provided an interface which can display performance 
information taking the influences on associated systems 
20 or storages into consideration. 

Further, since changed information is judged 
and displayed on the screen, the system administrator 
(user) can easily grasp a change in the use state or 
performance information. 
25 When the present invention is used in this 

way, performance information for the user to be able to 
easily understand can be offered. 

It should be further understood by those 
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skilled in the art that although the foregoing descrip- 
tion has been made on embodiments of the invention, the 
invention is not limited thereto and various changes 
and modifications may be made without departing from 
5 the spirit of the invention and the scope of the 
appended claims. 



